Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
File: bIRL1iy_ta3M-03Bbsojy1yd3rY.mft (raw, json)
Hash identifier: KIcggIqwbH0uSpFO3KVrhx6fUmDmLDNRaJKdYeQ795M=
Subject key identifier: 04:D4:01:FA:1C:0A:8A:44:F0:F3:03:A4:DB:97:04:2F:F5:F0:99:0C
Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
Certificate issuer: /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Certificate serial: 019CAC7E513BD3C6F53EF2E6B9A0A32B98B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 03:01:25 +0000
Manifest this update: Mon 02 Mar 2026 03:01:25 +0000
Manifest next update: Tue 03 Mar 2026 03:01:25 +0000
Files and hashes: 1: Q9m-lfpl94RgCrGyXlKa0BCxzmU.roa (hash: OrRe/AhPIl5+vGgEIK4ZmFPH1fmm0hGO63YBADXAmg8=)
2: bIRL1iy_ta3M-03Bbsojy1yd3rY.crl (hash: m+LicfGW90WyPOwr5/x1YRqGafrFFTKds6qCmGtYmbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:51:3b:d3:c6:f5:3e:f2:e6:b9:a0:a3:2b:98:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Validity
Not Before: Mar 2 03:01:25 2026 GMT
Not After : Mar 3 03:01:25 2026 GMT
Subject: CN=04d401fa1c0a8a44f0f303a4db97042ff5f0990c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c1:f3:4c:13:85:be:36:a2:8b:7e:2e:8c:cf:
73:f2:cd:72:89:b3:40:4f:03:c0:ab:34:bb:ff:31:
22:ee:59:c1:da:7b:34:12:a9:c0:ed:ef:80:32:1b:
07:2a:91:50:64:61:a9:d5:40:d1:a5:5d:fa:fc:42:
72:f4:65:88:f2:09:64:45:79:a7:c8:45:4c:7f:a2:
43:ba:e5:7a:9c:72:14:9b:b8:7a:df:2a:7e:cc:da:
00:9b:b7:0e:8c:14:5e:6e:e3:3e:15:e9:1c:d1:e3:
68:31:c8:b0:57:b8:42:c9:c0:f2:3a:d1:b5:4a:6b:
87:30:b8:11:dc:33:9b:cd:2c:f5:e7:11:66:32:19:
ee:5e:e1:16:70:90:77:d3:a7:f4:c1:52:40:68:3d:
4d:1d:41:2b:3c:c1:ee:34:96:0d:c5:8f:88:04:31:
0b:ba:2e:93:d5:7a:9c:8a:47:78:2a:17:4c:9f:23:
99:65:af:7c:78:4c:53:fd:e0:3b:aa:14:b7:dc:ed:
a0:97:64:d2:e6:96:06:b6:44:69:86:28:31:cf:04:
03:c9:a7:e3:d2:6c:ad:3c:6d:18:b9:23:49:4f:d6:
53:2e:ed:36:32:0e:92:03:39:bf:5d:36:c8:c2:6c:
48:fb:28:90:1b:09:ef:6e:f6:61:da:67:5e:a2:4a:
24:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D4:01:FA:1C:0A:8A:44:F0:F3:03:A4:DB:97:04:2F:F5:F0:99:0C
X509v3 Authority Key Identifier:
keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:65:e4:1a:bf:ae:76:9e:35:be:3b:19:61:1c:7a:18:35:5a:
cf:60:1b:c9:9c:ba:f6:9f:07:c2:05:2b:d7:66:1b:e8:08:d9:
aa:72:a7:7b:0a:e0:c6:6e:1a:01:11:9f:85:db:92:bc:82:84:
95:77:68:db:cb:52:22:af:b2:30:80:28:dd:65:ce:13:9d:93:
dc:34:0f:34:57:1f:83:28:5b:2b:2a:88:6f:2b:a5:43:0c:b3:
69:9d:88:89:4b:ea:8f:77:a6:2e:bd:af:e6:46:04:1c:6a:60:
ae:d5:56:a0:1d:fe:18:82:8a:1b:b5:21:a1:bb:a1:09:d0:08:
eb:cb:29:1a:a4:3f:41:af:fa:74:79:d7:ef:ae:e5:d0:05:bc:
66:ca:25:91:1b:6d:22:0a:5a:ff:1a:98:8d:3c:76:0a:8d:c0:
33:cd:9b:85:76:0e:82:e6:ae:b4:d9:6b:cb:e1:41:29:28:81:
9e:3c:9a:92:fa:9e:5d:7e:8e:12:a7:93:80:96:7f:66:14:6c:
0c:cc:c1:aa:ad:26:4e:2c:83:02:38:49:43:81:0e:69:a4:e7:
69:0d:b4:85:37:46:e5:6d:c9:5e:b0:bd:87:62:ce:ce:75:b2:
b5:91:88:9f:73:0b:08:db:f1:81:67:89:0b:09:56:e6:07:1a:
08:b3:60:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:53 2026 by rpki-client